APT28 targets NATO-aligned logistics and tech firms via malware, phishing, and 7 CVEs to spy on Ukraine aid routes.

Fake Facebook ads impersonating Kling AI deploy PureHVNC RAT via spoofed sites, stealing credentials and crypto data.

The original executable that launches "ckcfb.exe" simultaneously also extracts a second binary referred to as "StilKrip.exe," ...

Google has launched a new Chrome feature that automatically updates compromised passwords using its built-in Password Manager ...

Malicious JavaScript redirects mobile users to fake adult PWA apps, bypassing browser security and desktop filters.

Cybersecurity researchers have uncovered malicious packages uploaded to the Python Package Index (PyPI) repository that act ...

A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, ...

Cybersecurity researchers have discovered risky default identity and access management (IAM) roles impacting Amazon Web ...

The attack chains leverage spear-phishing lures as a starting point to activate the infection process and deploy a known ...

A new cryptojacking campaign dubbed RedisRaider is hijacking publicly exposed Redis servers by injecting cron jobs using ...

Edouard Bochin and Tao Yan from Palo Alto Networks have been credited with finding and reporting CVE-2025-4918. The discovery ...

Chrome flaw CVE-2025-4664 enables cross-origin data leaks; active exploit confirmed; update to 136.0.7103.113.